Managing Permissions

The Permission Management allows you to grant revoke permission on the
files, folders and registry for the users. Desktop Central Permission
Management Configuration enables you to grant/revoke permissions to multiple
users from a central point.

Step 1: Name the Configuration

Provide a name and description for the Permission Management configuration.

Step 2: Define Configuration

Files

To grant or revoke permissions for files, select the File
tab and specify the following values:

Parameter

Description

User/Group Principal

Select the users and groups for whom you would like to grant or revoke
permissions.

Action

Select the action from the following:

Append - To append to the existing file permissions.
Please note that it will only append to the existing permissions on the
object and will not overwrite. For example, for an object having full
permissions, if you just select a deny permission to write, only write
permission will be removed while the user/group can still modify the object.

Overwrite - To overwrite the existing file permissions

Revoke - To revoke the existing file permissions
of the specified user/group. All the permissions to the specified user/group
on that file will be removed. However, the inherited permissions will
not be removed.

Path

Specify the path of the file for which you need to specify permissions

Settings

Select the required options.

If you wish to add more permissions,
click Add More Permissions button
and repeat step 2. The values gets added to the List
of Permission Actions table.

Folders

To grant or revoke permissions for folders, select the Folder
tab and specify the following values:

Parameter

Description

User/Group Principal

Select the users and groups for whom you would like to grant or revoke
permissions.

Action

Select the action from the following:

Append - To append to the existing folder permissions.
Please note that it will only append to the existing permissions on the
object and will not overwrite. For example, for an object having full
permissions, if you just select a deny permission to write, only write
permission will be removed while the user/group can still modify the object.

Overwrite - To overwrite the existing folder permissions

Revoke - To revoke the existing folder permissions.
All the permissions to the specified user/group on that folder will be
removed. However, the inherited permissions will not be removed.

Path

Specify the path of the folder for which you need to specify permissions

Inheritance

Select the required option to specify how the permission should effect
its subfolders and files

Settings

Select the required options.

If you wish to add more permissions,
click Add More Permissions button
and repeat step 2. The values gets added to the List
of Permission Actions table.

Registry

To grant or revoke permissions for registry, select the Registry
tab and specify the following values:

Parameter

Description

User/Group Principal

Select the users and groups for whom you would like to grant or revoke
permissions.

Action

Select the action from the following:

Append - To append to the existing registry permissions.
Please note that it will only append to the existing permissions on the
object and will not overwrite. For example, for an object having full
permissions, if you just select a deny permission to write, only write
permission will be removed while the user/group can still modify the object.

Overwrite - To overwrite the existing registry
permissions

Revoke - To revoke the existing registry permissions.
All the permissions to the specified user/group on that registry key will
be removed. However, the inherited permissions will not be removed.

Hive

Select the registry hive from the given options

Key

Specify the key within that hive for which you need to set the permissions

Inheritance

Select the required options to specify how the permission should effect
its subkeys.

Settings

Select the required options.

If you wish to add more permissions,
click Add More Permissions button
and repeat step 2. The values gets added to the List
of Permission Actions table.

To modify a permission from the List
of Permission Actions table, select the appropriate row and click
icon and change the required values.

To delete a permission from the List
of Permission Actions table, select the appropriate row and click
icon.

Step 3: Define Target

Using the Defining
Targets procedure, define the targets for deploying the Permission
Management Configuration.

Step 4: Deploy Configuration

Click the Deploy button to deploy
the defined Permission Management Configuration in the defined targets.
The configuration will take effect during the next user logon.